Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer
File: PeLbtcG00xZ1vJ2hS_zbEApgHtE.cer (raw, json)
Hash identifier: 9pLfBWyZx5XMV20/s61+DpyONQJmaHjB1QanKPo5+rE=
Subject key identifier: 3D:E2:DB:B5:C1:B4:D3:16:75:BC:9D:A1:4B:FC:DB:10:0A:60:1E:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C65483BF1092E9EFFCA8B57CDE643C5DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Feb 2026 07:09:18 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 29325
AS: 43485
AS: 198633
IP: 91.236.221.0/24
IP: 194.37.248.0/24
IP: 195.149.70.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:48:3b:f1:09:2e:9e:ff:ca:8b:57:cd:e6:43:c5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 16 07:09:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de2dbb5c1b4d31675bc9da14bfcdb100a601ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:62:fd:57:b7:c5:0a:e7:c4:56:36:60:35:
0a:de:a4:2f:99:2f:71:a8:7d:9c:3e:ef:42:c3:47:
fd:0c:cb:d7:fa:78:d9:7e:98:4e:60:ae:5c:dd:e7:
13:c6:25:94:b9:2f:14:76:5b:23:19:42:97:f9:71:
7a:c0:0a:d3:ae:1f:5b:41:df:c3:97:2a:f1:bb:be:
85:ba:69:04:f5:df:0a:ec:c7:43:91:93:55:b9:ec:
59:70:25:c4:3a:90:26:d1:bd:29:8e:e7:7e:e4:91:
49:a4:8c:10:c4:e4:77:b6:c2:41:55:d4:52:b3:26:
eb:a5:eb:bf:a9:74:d5:be:a4:36:27:23:3a:20:67:
f8:8f:73:01:e8:0f:a4:98:57:e4:93:12:cb:33:ee:
bb:d6:0e:31:ba:b7:61:1c:7b:4e:d0:54:27:73:4b:
3a:89:d6:b0:a6:f8:af:56:91:da:28:d2:b3:da:54:
ab:72:4e:74:16:18:7e:67:d1:3e:f9:05:16:dd:32:
87:01:25:3f:9c:05:36:63:f2:03:ff:d6:53:34:b4:
b6:d4:62:76:bb:05:96:38:ad:e2:cd:28:47:a6:d1:
df:95:6b:f4:77:a0:6a:b6:dc:62:4f:75:54:81:d4:
48:1d:cc:fb:ac:e4:4d:6b:b8:9d:a8:44:85:b2:57:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:DB:B5:C1:B4:D3:16:75:BC:9D:A1:4B:FC:DB:10:0A:60:1E:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/68fc65-d581-4378-b548-d9d6ab982218/1/PeLbtcG00xZ1vJ2hS_zbEApgHtE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.221.0/24
194.37.248.0/24
195.149.70.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29325
43485
198633
Signature Algorithm: sha256WithRSAEncryption
16:59:5f:39:37:52:a9:78:7b:a2:7a:13:82:ec:5f:35:94:2f:
54:1d:43:67:26:1a:d2:73:e1:09:57:87:6c:aa:d4:c2:e7:f7:
55:20:49:e8:1a:34:91:03:96:71:9f:71:8d:11:b2:4b:cb:40:
55:88:43:62:d0:27:37:62:2f:8a:65:cc:7d:e9:ea:dc:b2:96:
fc:40:4e:e0:d2:35:1d:09:ad:b4:06:1e:2b:fd:e0:ff:d3:cb:
6f:f8:83:80:35:e5:a2:34:56:48:fc:e2:e1:ac:79:e9:ac:a7:
9a:6b:16:f5:8d:63:9c:7c:43:74:8d:54:a0:08:be:14:75:3d:
56:e5:fa:0b:d6:3d:b5:7c:40:65:ff:d0:9b:d9:12:0f:3c:5f:
2b:b7:da:c8:0c:2b:b5:2e:ad:b0:dd:ea:39:d9:8b:66:bb:e5:
ae:6c:d2:e4:c6:04:65:3f:7a:23:4d:a2:64:c3:f7:b1:3d:d9:
2e:7b:88:c2:ba:30:d1:fb:eb:67:46:07:7e:eb:f0:3c:30:8d:
63:2a:ff:df:a2:bc:89:9d:0b:4e:8c:d4:66:04:bd:89:eb:af:
e0:6b:cc:22:7b:a9:40:bd:01:8d:38:35:4a:23:c6:5b:3f:14:
4f:48:cd:93:ec:92:1b:e0:fd:1c:e6:3a:0c:f3:0d:a7:6d:a1:
9b:70:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:18 2026 by rpki-client